← Back to scan
File as GitHub Issue repo: mukul975/Anthropic-Cybersecurity-Skills

Push this scan report to mukul975/Anthropic-Cybersecurity-Skills

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

Missing import: `datetime` used but not imported

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
CRIT MINED107 [MINED107] Missing import: `email` used but not imported: The file uses `email.something(… skills/hunting-for-spearphishing-indica…:61
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… skills/hunting-for-dcom-lateral-movemen…:52
CRIT MINED107 [MINED107] Missing import: `operator` used but not imported: The file uses `operator.some… skills/performing-threat-emulation-with…:70
CRIT MINED107 [MINED107] Missing import: `inspect` used but not imported: The file uses `inspect.someth… skills/performing-docker-bench-security…:101
CRIT MINED107 [MINED107] Missing import: `datetime` used but not imported: The file uses `datetime.some… skills/performing-malware-ioc-extractio…:105
CRIT MINED107 [MINED107] Missing import: `platform` used but not imported: The file uses `platform.some… skills/conducting-pass-the-ticket-attac…:121
CRIT MINED107 [MINED107] Missing import: `queue` used but not imported: The file uses `queue.something(… skills/implementing-soar-playbook-with-…:90
CRIT MINED107 [MINED107] Missing import: `http` used but not imported: The file uses `http.something(..… skills/analyzing-network-traffic-of-mal…:162
CRIT MINED107 [MINED107] Missing import: `stat` used but not imported: The file uses `stat.something(..… skills/configuring-host-based-intrusion…:79
CRIT MINED107 [MINED107] Missing import: `signal` used but not imported: The file uses `signal.somethin… skills/performing-alert-triage-with-ela…:53
CRIT MINED107 [MINED107] Missing import: `queue` used but not imported: The file uses `queue.something(… skills/performing-alert-triage-with-ela…:287
CRIT MINED107 [MINED107] Missing import: `stat` used but not imported: The file uses `stat.something(..… skills/analyzing-persistence-mechanisms…:125
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… skills/hunting-for-living-off-the-land-…:136
CRIT MINED107 [MINED107] Missing import: `copy` used but not imported: The file uses `copy.something(..… skills/implementing-ransomware-backup-s…:304
CRIT MINED107 [MINED107] Missing import: `csv` used but not imported: The file uses `csv.something(...)… skills/implementing-digital-signatures-…:290
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… skills/detecting-ntlm-relay-with-event-…:40
CRIT MINED127 [MINED127] Cryptominer signature: `cryptonight`: Source contains a known cryptominer sign… skills/implementing-ebpf-security-monit…:50
CRIT MINED127 [MINED127] Cryptominer signature: `xmrig`: Source contains a known cryptominer signature … skills/implementing-ebpf-security-monit…:47
CRIT MINED127 [MINED127] Cryptominer signature: `cryptonight`: Source contains a known cryptominer sign… skills/implementing-cloud-workload-prot…:62
CRIT MINED127 [MINED127] Cryptominer signature: `xmrig`: Source contains a known cryptominer signature … skills/implementing-cloud-workload-prot…:62
CRIT MINED133 [MINED133] Hardcoded Slack webhook URL in source: File contains a hardcoded `Slack` webho… skills/auditing-tls-certificate-transpa…:905
CRIT MINED127 [MINED127] Cryptominer signature: `xmrig`: Source contains a known cryptominer signature … skills/implementing-runtime-security-wi…:134
CRIT MINED127 [MINED127] Cryptominer signature: `supportxmr`: Source contains a known cryptominer signa… skills/detecting-cryptomining-in-cloud/…:13
CRIT MINED127 [MINED127] Cryptominer signature: `moneroocean`: Source contains a known cryptominer sign… skills/detecting-cryptomining-in-cloud/…:14
CRIT MINED127 [MINED127] Cryptominer signature: `minergate.com`: Source contains a known cryptominer si… skills/detecting-cryptomining-in-cloud/…:12
CRIT MINED127 [MINED127] Cryptominer signature: `pool.minexmr.com`: Source contains a known cryptominer… skills/detecting-cryptomining-in-cloud/…:12
HIGH MINED108 [MINED108] `self.rfile` used but never assigned in __init__: Method `do_POST` of class `H… skills/performing-deception-technology-…:135
HIGH MINED108 [MINED108] `self.headers` used but never assigned in __init__: Method `do_POST` of class … skills/performing-deception-technology-…:134
HIGH MINED108 [MINED108] `self.wfile` used but never assigned in __init__: Method `do_POST` of class `H… skills/performing-deception-technology-…:149
HIGH MINED108 [MINED108] `self.client_address` used but never assigned in __init__: Method `do_POST` of… skills/performing-deception-technology-…:139
HIGH MINED108 [MINED108] `self.path` used but never assigned in __init__: Method `do_POST` of class `Ho… skills/performing-deception-technology-…:141
HIGH MINED108 [MINED108] `self.path` used but never assigned in __init__: Method `do_GET` of class `Hon… skills/performing-deception-technology-…:127
HIGH MINED108 [MINED108] `self.wfile` used but never assigned in __init__: Method `do_GET` of class `Ho… skills/performing-deception-technology-…:131
HIGH MINED108 [MINED108] `self.headers` used but never assigned in __init__: Method `do_GET` of class `… skills/performing-deception-technology-…:123
HIGH MINED108 [MINED108] `self.client_address` used but never assigned in __init__: Method `do_GET` of … skills/performing-deception-technology-…:120
HIGH MINED108 [MINED108] `self.client_address` used but never assigned in __init__: Method `do_GET` of … skills/performing-deception-technology-…:119
HIGH MINED108 [MINED108] `self.path` used but never assigned in __init__: Method `do_GET` of class `Hon… skills/performing-deception-technology-…:122
HIGH MINED106 [MINED106] Phantom test coverage: test_race_condition: Test function `test_race_condition… skills/exploiting-race-condition-vulner…:69
HIGH MINED106 [MINED106] Phantom test coverage: test_idor_via_function: Test function `test_idor_via_fu… skills/exploiting-broken-function-level…:71
HIGH MINED106 [MINED106] Phantom test coverage: test_privilege_escalation: Test function `test_privileg… skills/exploiting-broken-function-level…:54
HIGH MINED106 [MINED106] Phantom test coverage: test_method_switching: Test function `test_method_switc… skills/exploiting-broken-function-level…:44
HIGH MINED106 [MINED106] Phantom test coverage: test_endpoint_access: Test function `test_endpoint_acce… skills/exploiting-broken-function-level…:25
HIGH MINED106 [MINED106] Phantom test coverage: test_path_traversal_bypass: Test function `test_path_tr… skills/bypassing-authentication-with-fo…:97
HIGH MINED106 [MINED106] Phantom test coverage: test_http_method_bypass: Test function `test_http_metho… skills/bypassing-authentication-with-fo…:83
HIGH MINED106 [MINED106] Phantom test coverage: test_endpoint: Test function `test_endpoint` runs code … skills/bypassing-authentication-with-fo…:37
HIGH MINED106 [MINED106] Phantom test coverage: test_token_endpoint: Test function `test_token_endpoint… skills/configuring-oauth2-authorization…:70
HIGH MINED106 [MINED106] Phantom test coverage: test_freemarker_rce: Test function `test_freemarker_rce… skills/exploiting-template-injection-vu…:132
HIGH MINED106 [MINED106] Phantom test coverage: test_twig_rce: Test function `test_twig_rce` runs code … skills/exploiting-template-injection-vu…:112
HIGH MINED106 [MINED106] Phantom test coverage: test_jinja2_rce: Test function `test_jinja2_rce` runs c… skills/exploiting-template-injection-vu…:85
HIGH MINED106 [MINED106] Phantom test coverage: test_ssti_detection: Test function `test_ssti_detection… skills/exploiting-template-injection-vu…:38
HIGH MINED106 [MINED106] Phantom test coverage: test_internal_origins: Test function `test_internal_ori… skills/testing-cors-misconfiguration/sc…:132
HIGH MINED106 [MINED106] Phantom test coverage: test_null_origin: Test function `test_null_origin` runs… skills/testing-cors-misconfiguration/sc…:111
HIGH MINED106 [MINED106] Phantom test coverage: test_wildcard_with_credentials: Test function `test_wil… skills/testing-cors-misconfiguration/sc…:93
HIGH MINED106 [MINED106] Phantom test coverage: test_preflight: Test function `test_preflight` runs cod… skills/testing-cors-misconfiguration/sc…:64
HIGH MINED106 [MINED106] Phantom test coverage: test_origin_reflection: Test function `test_origin_refl… skills/testing-cors-misconfiguration/sc…:35
HIGH MINED106 [MINED106] Phantom test coverage: test_alias_overloading: Test function `test_alias_overl… skills/performing-graphql-security-asse…:139
HIGH MINED106 [MINED106] Phantom test coverage: test_unauthorized_access: Test function `test_unauthori… skills/performing-graphql-security-asse…:109
HIGH MINED106 [MINED106] Phantom test coverage: test_field_suggestions: Test function `test_field_sugge… skills/performing-graphql-security-asse…:92
HIGH MINED106 [MINED106] Phantom test coverage: test_batch_queries: Test function `test_batch_queries` … skills/performing-graphql-security-asse…:72
HIGH MINED106 [MINED106] Phantom test coverage: test_query_depth: Test function `test_query_depth` runs… skills/performing-graphql-security-asse…:57
HIGH MINED106 [MINED106] Phantom test coverage: test_introspection: Test function `test_introspection` … skills/performing-graphql-security-asse…:34
HIGH MINED106 [MINED106] Phantom test coverage: test_endpoint: Test function `test_endpoint` runs code … skills/exploiting-excessive-data-exposu…:75
HIGH MINED009 [MINED009] Floats For Money: Variable named price/amount/cost typed as float instead of D… skills/testing-api-for-mass-assignment-…:148
HIGH MINED012 [MINED012] Curl Pipe Bash: curl ... | sh / bash — runs unverified network code. skills/securing-container-registry-imag…:58
HIGH MINED012 [MINED012] Curl Pipe Bash: curl ... | sh / bash — runs unverified network code. skills/scanning-container-images-with-g…:35
HIGH MINED034 [MINED034] Python Subprocess Shell True: subprocess(..., shell=True) enables command inje… skills/performing-threat-emulation-with…:99
HIGH SEC113 [SEC113] SSH host-key verification disabled (MITM): Accepting any SSH host key on first c… skills/performing-agentless-vulnerabili…:40
HIGH SEC113 [SEC113] SSH host-key verification disabled (MITM): Accepting any SSH host key on first c… skills/implementing-syslog-centralizati…:152
HIGH SEC082 [SEC082] Python: paramiko AutoAddPolicy or no host-key verification: AutoAddPolicy / Warn… skills/performing-agentless-vulnerabili…:40
HIGH SEC082 [SEC082] Python: paramiko AutoAddPolicy or no host-key verification: AutoAddPolicy / Warn… skills/implementing-syslog-centralizati…:152
HIGH MINED006 [MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and Syste… skills/implementing-honeypot-for-ransom…:236
HIGH MINED006 [MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and Syste… skills/hunting-for-startup-folder-persi…:230
HIGH MINED006 [MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and Syste… skills/conducting-man-in-the-middle-att…:131
HIGH MINED021 [MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can co… skills/detecting-fileless-attacks-on-en…:53
HIGH MINED021 [MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can co… skills/deploying-osquery-for-endpoint-m…:83
HIGH MINED021 [MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can co… skills/collecting-volatile-evidence-fro…:153
HIGH MINED014 [MINED014] Disabled Tls Verify: verify=False in requests, rejectUnauthorized:false in nod… skills/conducting-external-reconnaissan…:126
HIGH MINED014 [MINED014] Disabled Tls Verify: verify=False in requests, rejectUnauthorized:false in nod… skills/bypassing-authentication-with-fo…:40
HIGH MINED014 [MINED014] Disabled Tls Verify: verify=False in requests, rejectUnauthorized:false in nod… skills/building-red-team-c2-infrastruct…:26
HIGH MINED036 [MINED036] Python Os System Call: os.system() invokes shell with no escaping. skills/analyzing-supply-chain-malware-a…:114
HIGH SEC103 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDA… skills/analyzing-pdf-malware-with-pdfid…:68
HIGH SEC103 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDA… skills/analyzing-golang-malware-with-gh…:37
HIGH SEC103 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDA… skills/analyzing-email-headers-for-phis…:64
HIGH SEC078 [SEC078] Python: requests without timeout: requests.get/post without a timeout will hang … skills/building-automated-malware-submi…:29
HIGH SEC078 [SEC078] Python: requests without timeout: requests.get/post without a timeout will hang … skills/automating-ioc-enrichment/script…:47
HIGH SEC078 [SEC078] Python: requests without timeout: requests.get/post without a timeout will hang … skills/analyzing-ransomware-leak-site-i…:40
HIGH SEC029 [SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT… skills/analyzing-threat-actor-ttps-with…:27
HIGH SEC029 [SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT… skills/analyzing-ransomware-network-ind…:58
HIGH SEC029 [SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT… skills/analyzing-apt-group-with-mitre-n…:51
HIGH MINED001 [MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e… skills/analyzing-cobaltstrike-malleable…:97
HIGH MINED001 [MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e… skills/analyzing-cloud-storage-access-p…:138
HIGH MINED001 [MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e… skills/analyzing-active-directory-acl-a…:143
HIGH MINED004 [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums). skills/analyzing-indicators-of-compromi…:17
HIGH MINED004 [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums). skills/analyzing-email-headers-for-phis…:129
HIGH MINED004 [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums). skills/acquiring-disk-image-with-dd-and…:50
HIGH SEC128 [SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call … skills/analyzing-docker-container-foren…:150
HIGH SEC128 [SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call … skills/analyzing-cobalt-strike-beacon-c…:57
HIGH SEC128 [SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call … skills/acquiring-disk-image-with-dd-and…:58
HIGH COMP001 [COMP001] High cognitive complexity: Function `parse_acl` has cognitive complexity 45 (So… skills/analyzing-active-directory-acl-a…:90
HIGH SEC004 [SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection. skills/performing-sqlite-database-foren…:149
HIGH SEC020 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-b… skills/deploying-cloudflare-access-for-…:91
HIGH SEC020 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-b… skills/building-identity-federation-wit…:213
HIGH SEC020 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-b… skills/analyzing-windows-event-logs-in-…:143
HIGH SEC005 [SEC005] Command Injection Risk: Unsafe shell execution or eval of user input. skills/performing-threat-hunting-with-y…:62
HIGH SEC013 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file pat… skills/conducting-cyber-risk-assessment…:190
HIGH SEC013 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file pat… skills/building-ioc-defanging-and-shari…:151
HIGH SEC013 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file pat… skills/achieving-cmmc-level-2-complianc…:166
HIGH SEC004 [SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection. skills/exploiting-insecure-data-storage…:125
HIGH SEC004 [SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection. skills/exploiting-insecure-data-storage…:85
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-hardware-security-mod…:124
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/implementing-jwt-signing-and-ver…:204
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/detecting-bluetooth-low-energy-a…:259
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/detecting-bluetooth-low-energy-a…:266
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/detecting-deepfake-audio-in-vish…:340
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/detecting-deepfake-audio-in-vish…:298
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/implementing-gdpr-data-subject-a…:453
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-web-application-scann…:114
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-external-network-pene…:24
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/exploiting-smb-vulnerabilities-w…:78
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-malware-persistence-i…:100
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-malware-persistence-i…:112
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-malware-persistence-i…:148
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-malware-persistence-i…:69
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/detecting-kerberoasting-attacks/…:136
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/detecting-kerberoasting-attacks/…:49
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-kerberoasting-attack/…:111
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/implementing-soar-automation-wit…:177
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/prioritizing-vulnerabilities-wit…:208
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-lateral-movement-with…:56
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/analyzing-network-flow-data-with…:48
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-open-source-intellige…:138
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-open-source-intellige…:409
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-open-source-intellige…:272
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… skills/performing-open-source-intellige…:89
MED SEC134 [SEC134] AI scaffold leftover — Lorem ipsum / example.com / John Doe in code: Lorem ipsum… skills/performing-dark-web-monitoring-f…:15
MED SEC034 [SEC034] Log Injection / Log Forging — unsanitized user input in log: User input is logge… skills/implementing-envelope-encryption…:268
MED SEC034 [SEC034] Log Injection / Log Forging — unsanitized user input in log: User input is logge… skills/implementing-digital-signatures-…:137
MED SEC034 [SEC034] Log Injection / Log Forging — unsanitized user input in log: User input is logge… skills/implementing-aes-encryption-for-…:138
MED SEC015 [SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. … skills/implementing-aes-encryption-for-…:99
MED SEC015 [SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. … skills/extracting-memory-artifacts-with…:12
MED SEC042 [SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes… skills/performing-mobile-device-forensi…:154
MED SEC042 [SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes… skills/exploiting-insecure-data-storage…:112
MED SEC042 [SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes… skills/exploiting-insecure-data-storage…:76
MED SEC123 [SEC123] Production stack trace / debug output exposed: Debug mode left on in production … skills/deobfuscating-javascript-malware…:145
MED SEC014 [SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing ma… skills/bypassing-authentication-with-fo…:40
MED SEC014 [SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing ma… skills/building-red-team-c2-infrastruct…:26
MED SEC014 [SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing ma… skills/building-c2-infrastructure-with-…:37
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … skills/building-incident-response-dashb…:106
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … skills/analyzing-supply-chain-malware-a…:117
MED SEC136 [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all excepti… skills/auditing-azure-active-directory-…:113
MED SEC136 [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all excepti… skills/analyzing-windows-prefetch-with-…:52
MED SEC136 [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all excepti… skills/analyzing-powershell-empire-arti…:105
MED SEC031 [SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like … skills/securing-github-actions-workflow…:35
MED SEC031 [SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like … skills/deobfuscating-powershell-obfusca…:253
MED SEC031 [SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like … skills/analyzing-golang-malware-with-gh…:100
MED ERR001 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even… skills/analyzing-windows-lnk-files-for-…:113
MED ERR001 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even… skills/analyzing-office365-audit-logs-f…:81
MED ERR001 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even… skills/analyzing-active-directory-acl-a…:143
MED COMP001 [COMP001] High cognitive complexity: Function `compute` has cognitive complexity 22 (Sona… skills/achieving-cmmc-level-2-complianc…:47
MED JRN012 Runtime environment contract is missing referenced variables skills/analyzing-indicators-of-compromi…:239
MED AGT012 Agent control bridge may listen on a network interface without visible auth skills/auditing-cloud-with-cis-benchmar…:98
MED AGT015 Remote install command pipes network code directly to a shell skills/analyzing-sbom-for-supply-chain-…:169
MED SEC005 [SEC005] Command Injection Risk: Unsafe shell execution or eval of user input. skills/performing-threat-emulation-with…:99
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… skills/securing-github-actions-workflow…:121
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… skills/implementing-google-workspace-ss…:93
LOW COMP001 [COMP001] High cognitive complexity: Function `render` has cognitive complexity 8 (SonarS… skills/achieving-cmmc-level-2-complianc…:99
LOW MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout… .github/workflows/update-index.yml:17
LOW MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout… .github/workflows/sync-marketplace-vers…:14
LOW MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout… .github/workflows/validate-skills.yml:16
LOW WEB005 robots.txt does not advertise a sitemap skills/analyzing-cobalt-strike-beacon-c…
INFO MINED077 [MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles. skills/performing-jwt-none-algorithm-at…:76
INFO MINED053 [MINED053] Placeholder Default Username: [email protected] / [email protected] / admin/admin… skills/testing-for-json-web-token-vulne…:28
INFO MINED053 [MINED053] Placeholder Default Username: [email protected] / [email protected] / admin/admin… skills/performing-active-directory-pene…:9
INFO MINED053 [MINED053] Placeholder Default Username: [email protected] / [email protected] / admin/admin… skills/exploiting-nopac-cve-2021-42278-…:121
INFO MINED073 [MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to… skills/deobfuscating-powershell-obfusca…:253
INFO MINED062 [MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model. skills/configuring-multi-factor-authent…:16
INFO MINED062 [MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model. skills/conducting-social-engineering-pr…:17
INFO MINED062 [MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model. skills/building-phishing-reporting-butt…:24
INFO MINED079 [MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) — off-… skills/performing-supply-chain-attack-s…:19
INFO MINED079 [MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) — off-… skills/analyzing-tls-certificate-transp…:43
INFO MINED063 [MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) — file can be replaced/de… skills/analyzing-network-traffic-for-in…:132
INFO MINED063 [MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) — file can be replaced/de… skills/analyzing-malware-behavior-with-…:65
INFO MINED063 [MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) — file can be replaced/de… skills/analyzing-linux-system-artifacts…:143
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. skills/analyzing-windows-event-logs-in-…:143
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. skills/analyzing-kubernetes-audit-logs/…:174
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. skills/analyzing-indicators-of-compromi…:251
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… skills/auditing-aws-s3-bucket-permissio…:58
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… skills/analyzing-linux-elf-malware/scri…:99
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… skills/analyzing-indicators-of-compromi…:38
INFO MINED055 [MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versi… skills/building-identity-federation-wit…:9
INFO MINED055 [MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versi… skills/analyzing-cobalt-strike-beacon-c…:9
INFO MINED055 [MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versi… skills/analyzing-campaign-attribution-e…:12
INFO MINED067 [MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang f… skills/analyzing-indicators-of-compromi…:70
INFO MINED067 [MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang f… skills/analyzing-certificate-transparen…:28
INFO MINED067 [MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang f… skills/analyzing-apt-group-with-mitre-n…:51
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… skills/analyzing-cobaltstrike-malleable…:98
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… skills/analyzing-cloud-storage-access-p…:139
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… skills/analyzing-active-directory-acl-a…:144
INFO MINED064 [MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services. skills/implementing-syslog-centralizati…:38
INFO MINED064 [MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services. skills/achieving-cmmc-level-2-complianc…:13
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `mukul975/Anthropic-Cybersecurity-Skills`

**Score: 68/100 (B-)**  ·  214 findings  ·  scanned 2026-06-22 03:26 UTC  ·  236,342 LOC

| Severity | Count |
|---|---|
| CRITICAL | 40 |
| HIGH | 83 |
| MEDIUM | 54 |
| LOW | 7 |

📊 [Full filterable report](https://repobility.com/scan/06aee137-74c6-4266-960c-52233d41f613/)  ·  ![scorecard](https://repobility.com/scan/06aee137-74c6-4266-960c-52233d41f613/report.png?v=1782098760-s2)

### Top findings

1. **CRITICAL** `MINED107` — Missing import: `email` used but not imported
   `skills/hunting-for-spearphishing-indicators/scripts/agent.py:61` · ✓ Repobility
2. **CRITICAL** `MINED107` — Missing import: `xml` used but not imported
   `skills/hunting-for-dcom-lateral-movement/scripts/agent.py:52` · ✓ Repobility
3. **CRITICAL** `MINED107` — Missing import: `operator` used but not imported
   `skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:70` · ✓ Repobility
4. **CRITICAL** `MINED107` — Missing import: `inspect` used but not imported
   `skills/performing-docker-bench-security-assessment/scripts/agent.py:101` · ✓ Repobility
5. **CRITICAL** `MINED107` — Missing import: `datetime` used but not imported
   `skills/performing-malware-ioc-extraction/scripts/agent.py:105` · ✓ Repobility

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/06aee137-74c6-4266-960c-52233d41f613/_
Already filed
This repo publishes a SECURITY.md policy and the scan contains 28 Critical/High security finding(s). Public issue filing would violate coordinated disclosure. Submit privately via the project's security reporting channel.
Megaproject â high spam risk
Could not determine 'mukul975/Anthropic-Cybersecurity-Skills' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
Open in GitHub to file this issue Filing guard overridden Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.